IP Library Granted Patent US 11,804,955
Granted Patent B1
US 11,804,955 · App. 17/024,388 · Granted Oct 31, 2023

Method and system for modulated waveform encryption

Inventor: Richard J. Blech (Irvine, CA)
Assignee: CHOL, Inc.
H04L9/0825H04L9/065H04L9/085H04L9/14H04L9/3213
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,804,955
App. No.
17/024,388
Granted
Oct 31, 2023
Kind
B1
Abstract

Embodiments of an automatic key delivery system and methods of use are described. One computerized method utilizing an automatic key delivery system includes operations of establishing, by a first network device, a communication session with a second network device, transmitting first content to the second network device during the communication session, wherein the first content is encrypted with a first encryption format, and transmitting second content to the second network device during the communication session, wherein the second content is encrypted with a second encryption format. The computerized method may further includes operations of receiving, from the second network device, third content during the communication session, wherein the third content is encrypted with the first encryption format, and decrypting the third content using a first cryptographic key corresponding to the first encryption format.

Claims (47)

1. A computerized method comprising:

establishing, by a first network device, a communication session with a second network device;

transmitting first content to the second network device during the communication session, wherein the first content is encrypted with a first encryption format;

transmitting second content to the second network device during the communication session, wherein the second content is encrypted with a second encryption format;

performing, by the first network device, an authentication process with a token authority;

receiving a first token from the token authority;

splitting a first cryptographic key corresponding to the first encryption format into a plurality of cryptographic key fragments;

providing a first key value pair to a first relay server, wherein the first key value pair includes a first cryptographic key fragment of the plurality of cryptographic key fragments and the first token; and

providing a second key value pair to a second relay server, wherein the second key value pair includes a second cryptographic key fragment of the plurality of cryptographic key fragments and the first token, wherein the first relay server is geographically separated from the second relay server.

2. The computerized method of claim 1 further comprising:

receiving, from the second network device, third content during the communication session, wherein the third content is encrypted with the first encryption format; and

decrypting the third content using a first cryptographic key corresponding to the first encryption format.

3. The computerized method of claim 1 , wherein the first encryption format corresponds to encryption with the first cryptographic key having a first key size and the second encryption format corresponds to encryption with a second cryptographic key having a second key size different than the first key size.

4. The computerized method of claim 3 , wherein the first key size and the second key size are each selectable via user input.

5. The computerized method of claim 3 , wherein the first key size and the second key size are each predetermined according to a configuration file accessible by the first network device.

6. A non-transitory storage medium having logic stored thereon, the logic being executable by one or more processors to perform operations including:

establishing, by a first network device, a communication session with a second network device;

transmitting first content to the second network device during the communication session, wherein the first content is encrypted with a first encryption format;

transmitting second content to the second network device during the communication session, wherein the second content is encrypted with a second encryption format;

performing, by the first network device, an authentication process with a token authority;

receiving a first token from the token authority;

splitting a first cryptographic key corresponding to the first encryption format into a plurality of cryptographic key fragments;

providing a first key value pair to a first relay server, wherein the first key value pair includes a first cryptographic key fragment of the plurality of cryptographic key fragments and the first token; and

providing a second key value pair to a second relay server, wherein the second key value pair includes a second cryptographic key fragment of the plurality of cryptographic key fragments and the first token, wherein the first relay server is geographically separated from the second relay server.

7. The non-transitory storage medium of claim 6 , wherein the operations further include:

receiving, from the second network device, third content during the communication session, wherein the third content is encrypted with the first encryption format; and

decrypting the third content using a first cryptographic key corresponding to the first encryption format.

8. The non-transitory storage medium of claim 6 , wherein the first encryption format corresponds to encryption with the first cryptographic key having a first key size and the second encryption format corresponds to encryption with a second cryptographic key having a second key size different than the first key size.

9. The non-transitory storage medium of claim 8 , wherein the first key size and the second key size are each selectable via user input.

10. The non-transitory storage medium of claim 8 , wherein the first key size and the second key size are each predetermined according to a configuration file accessible by the first network device.

11. A system comprising:

one or more processors; and

a non-transitory, computer-readable medium communicatively coupled to the one or more processors and having instructions stored thereon, the instructions, when executed by the one or more processors, causing performance of operations including:

establishing, by a first network device, a communication session with a second network device;

transmitting first content to the second network device during the communication session, wherein the first content is encrypted with a first encryption format;

transmitting second content to the second network device during the communication session, wherein the second content is encrypted with a second encryption format;

performing, by the first network device, an authentication process with a token authority;

receiving a first token from the token authority;

splitting a first cryptographic key corresponding to the first encryption format into a plurality of cryptographic key fragments;

providing a first key value pair to a first relay server, wherein the first key value pair includes a first cryptographic key fragment of the plurality of cryptographic key fragments and the first token; and

providing a second key value pair to a second relay server, wherein the second key value pair includes a second cryptographic key fragment of the plurality of cryptographic key fragments and the first token, wherein the first relay server is geographically separated from the second relay server.

12. The system of claim 11 , wherein the operations further include:

receiving, from the second network device, third content during the communication session, wherein the third content is encrypted with the first encryption format; and

decrypting the third content using a first cryptographic key corresponding to the first encryption format.

13. The system of claim 11 , wherein the first encryption format corresponds to encryption with the first cryptographic key having a first key size and the second encryption format corresponds to encryption with a second cryptographic key having a second key size different than the first key size.

14. The system of claim 13 , wherein the first key size and the second key size are each selectable via user input.

15. The system of claim 13 , wherein the first key size and the second key size are each predetermined according to a configuration file accessible by the first network device.

Assignments (4)
FOUNDERS AGREEMENT Recorded Jun 3, 2022
From: BLECH, RICHARD J
To: SECURE CHANNELS INC
Reel/Frame 060269/0322 →
FIRST AMENDMENT TO ASSIGNMENT AND ASSUMPTION OF CONTRACTS Recorded Jun 3, 2022
From: PETNEDA HOLDINGS LIMITED
To: CHOL INC.
Reel/Frame 060269/0317 →
SECURITY INTEREST Recorded Jun 3, 2022
From: SECURE CHANNELS INC.
To: PETNEDA HOLDINGS LIMITED
Reel/Frame 060102/0467 →
ASSIGNMENT AND ASSUMPTION OF CONTRACTS Recorded Jun 3, 2022
From: PETNEDA HOLDINGS LIMITED
To: CHOL INC.
Reel/Frame 060269/0312 →
Continuity (1)
Provisional Application 62900186 · Sep 13, 2019
Cited By (5)
US 12,200,128 US 12,301,347 US 12,301,575 US 12,353,576 US 12,683,768